Privacy Policy
Last updated: October 4, 2026
1. What we collect
- Contact & newsletter forms — name, email address, and your message, only when you submit them, and only with your explicit consent (the checkbox on each form).
- Anonymous visit statistics — page views, device type, browser, and approximate location (country/region/city derived from network headers). Collected only after you accept the cookie banner. No advertising identifiers, no cross-site tracking.
- AI assistant conversations — questions you ask the on-site assistant and its replies are stored, with dates, so the site owner can improve its answers. Questions are sent to the AI provider listed below to produce answers. Don’t include personal, medical, or confidential details in questions.
- Account data (site owners) — email, name, and billing status, processed to operate your subscription.
2. How it’s used
Form submissions are delivered by email to the site owner and stored in the site’s lead inbox. Visit statistics appear only in aggregate on the owner’s dashboard. Data is never sold or shared with advertisers.
3. Who is responsible
The owner of this site decides what visitor data is collected and is responsible for it (the “controller”). The site runs on a platform operated by [COMPANY NAME], which processes that data on the owner’s behalf under a Data Processing Agreement. For site owners’ own account and billing data, [COMPANY NAME] is the controller.
4. Sub-processors
These providers process data for the platform. We update this list before adding a new one. Some are outside your country; where required we rely on appropriate safeguards such as standard contractual clauses.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting | USA (global edge) |
| MongoDB Atlas | Database | Cloud region chosen by us |
| Stripe | Payments | USA |
| Resend | Email delivery | USA |
| Cloudflare | Image storage and bot protection | Global |
| Upstash | Security (rate limiting) | Cloud region chosen by us |
| AI model providers: one or more of Anthropic, OpenAI and DeepSeek | AI assistant and AI editing features | USA, China |
| Google Analytics | Visit statistics, on sites that turn it on | USA |
5. Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing demo.photographer@example.com. Site owners can export or erase their site’s data from the admin panel (Privacy & data). For account data, contact [LEGAL EMAIL].
6. Retention
Leads and subscribers are kept until the site owner deletes them. AI conversations and question logs are deleted after 180 days. Anonymous statistics are kept in aggregate. Account data and all site data are deleted when a site is removed; billing records are kept as long as tax law requires.
7. Cookies
See the Cookie Policy for the full list.